我正在尝试创建一个带有公共和私有子网的vpc以及Aurora mysql集群和实例在同一个vpc中,并为RDS提供自定义安全组 .
我在模块中创建了vpc(公共/私有子网,自定义安全组) . 也是不同模块中的aurora-mysql .
我在模块文件中的vpc配置
resource "aws_vpc" "main" {
cidr_block = "${var.vpc_cidr}"
instance_tenancy = "${var.tenancy}"
enable_dns_support = "true"
enable_dns_hostnames = "true"
tags {
Name = "${var.tag_name}"
}
}
resource "aws_subnet" "main-public-1" {
vpc_id = "${var.vpc_id}"
cidr_block = "${var.subnet_cidr_1}"
availability_zone = "${var.region}a"
map_public_ip_on_launch = true
tags {
Name = "${var.tag_name}-subnet1"
}
}
resource "aws_subnet" "main-private-1" {
count = "${var.create_private_subnet}"
vpc_id = "${var.vpc_id}"
cidr_block = "${var.private_subnet_cidr_1}"
map_public_ip_on_launch = false
availability_zone = "${var.region}a"
tags {
Name = "${var.tag_name}-private-subnet1"
}
}
resource "aws_subnet" "main-private-2" {
count = "${var.create_private_subnet}"
vpc_id = "${var.vpc_id}"
cidr_block = "${var.private_subnet_cidr_2}"
map_public_ip_on_launch = false
availability_zone = "${var.region}b"
tags {
Name = "${var.tag_name}-private-subnet2"
}
}
resource "aws_security_group" "aurora-sg" {
name = "aurora-security-group"
vpc_id = "${var.vpc_id}"
ingress {
protocol = "tcp"
from_port = 0
to_port = 65535
cidr_blocks = ["0.0.0.0/0"]
}
egress {
protocol = -1
from_port = 0
to_port = 0
cidr_blocks = ["0.0.0.0/0"]
}
}
我在模块文件中的RDS配置
resource "aws_rds_cluster" "cluster" {
cluster_identifier = "${var.cluster_name}"
engine = "aurora-mysql"
database_name = "sample_rds"
master_username = "${var.username}"
master_password = "${var.password}"
vpc_security_group_ids = ["${aws_security_group.aurora-sg.id}"]
skip_final_snapshot = true
}
resource "aws_rds_cluster_instance" "cluster_instances" {
identifier = "${var.cluster_name}-instance"
cluster_identifier = "${aws_rds_cluster.cluster.id}"
instance_class = "${var.instance_class}"
publicly_accessible = "${var.publicly_accessible}"
db_subnet_group_name =
"${aws_db_subnet_group.aurora_subnet_group.id}"
}
resource "aws_db_subnet_group" "aurora_subnet_group" {
name = "tf-rds-${var.cluster_name}"
subnet_ids = ["${var.subnets}"]
tags {
Name = "tf-rds-${var.cluster_name}"
}
}
我的主要terraform脚本 . 我已将变量传递给RDS模块,如vpc_id,db用户名和密码,私有子网ID和安全组ID
module "aurora_mysql" {
source = "../modules/rds-aurora"
vpc_id = "${module.my_vpc.vpc_id}"
publicly_accessible = true
instance_class = "db.t2.medium"
username = "${var.db_username}"
password = "${var.db_password}"
subnets =
["${module.my_vpc.subnet_id_1[1]}","${module.my_vpc.subnet_id_1[2]}"]
security_group_ids = "${module.my_vpc.vpc_rds_sg_id}"
}
当我尝试 apply
配置vpc成功创建子网和安全组但得到错误 Error creating DB Instance: InvalidParameterCombination: DB instance and EC2 security group are in different VPC
即使我传递新的vpc私有子网ID和自定义安全组ID,我的RDS实例也会在默认VPC中创建 .
1 回答
数据库子网组是群集(
aws_rds_cluster
)的参数,而不是实例 . 在您的配置中,您似乎在实例配置中传递子网组而不是在群集配置中 . 我相信,这会迫使RDS回退使用default
子网组,这是您的default
VPC中的一组子网 .我不是Terrform的专家,所以我会让你知道你的配置需要改变什么来正确建模 . 希望这可以帮助!